Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
890 vulnerabilities · highest exploit probability first
- CVE-2017-8594High 7.5Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption…microsoft · internet explorerEPSS50%2 exploitsPublished Jul 11, 2017
- CVE-2017-10974High 7.5Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080.yaws · yawsEPSS81%2 exploitsPublished Jul 7, 2017
- CVE-2017-9833High 7.5/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges.boa · boaEPSS68%2 exploitsPublished Jun 23, 2017
- CVE-2017-9757High 8.8IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.ipfire · ipfireEPSS37%2 exploitsPublished Jun 19, 2017
- CVE-2017-8487High 7.8Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."microsoft · windows server 2003EPSS54%2 exploitsPublished Jun 15, 2017
- CVE-2017-8461High 7.8Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution…microsoft · windows server 2003EPSS20%2 exploitsPublished Jun 15, 2017
- CVE-2017-8548High 7.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption…microsoft · edgeEPSS68%2 exploitsPublished Jun 14, 2017
- CVE-2017-8496High 7.5Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".microsoft · edgeEPSS51%2 exploitsPublished Jun 14, 2017
- CVE-2017-8538High 7.8The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…microsoft · malware protection engineEPSS50%1 exploitPublished May 26, 2017
- CVE-2016-10073High 7.5The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request.vanillaforums · vanillaEPSS84%3 exploitsPublished May 23, 2017
- CVE-2017-9100High 8.8login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt.dlink · dir-600m firmwareEPSS85%1 exploitPublished May 21, 2017
- CVE-2017-9080High 8.8PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.playsms · playsmsEPSS62%4 exploitsPublished May 19, 2017
- CVE-2017-0290High 7.8The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…microsoft · malware protection engineEPSS81%1 exploitPublished May 9, 2017
- CVE-2017-3730High 7.5In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash.openssl · opensslEPSS55%2 exploitsPublished May 4, 2017
- CVE-2017-8779High 7.5rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no…libtirpc project · libtirpcEPSS81%1 exploitPublished May 4, 2017
- CVE-2016-1561High 7.5ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.exagrid · ex10000e firmwareEPSS74%3 exploitsPublished Apr 21, 2017
- CVE-2017-3599High 7.5mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)oracle · mysqlEPSS90%1 exploitPublished Apr 19, 2017
- CVE-2015-4624High 7.5Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.hak5 · wi-fi pineapple firmwareEPSS37%6 exploitsPublished Mar 31, 2017
- CVE-2017-7310High 7.8A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML…flexense · diskbossEPSS54%8 exploitsPublished Mar 29, 2017
- CVE-2017-0108High 7.8The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to…microsoft · live meetingEPSS50%1 exploitPublished Mar 16, 2017
- CVE-2017-0089High 8.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…microsoft · windows 7EPSS57%1 exploitPublished Mar 16, 2017
- CVE-2017-0070High 7.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers.microsoft · edgeEPSS79%1 exploitPublished Mar 16, 2017
- CVE-2017-6398High 8.8An authenticated user can execute a terminal command in the context of the web server user (which is root).trendmicro · interscan messaging security virtual applianceEPSS54%1 exploitPublished Mar 14, 2017
- CVE-2017-6527High 7.5dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter).dnatools · dnalimsEPSS57%1 exploitPublished Mar 9, 2017
- CVE-2017-5982High 7.5Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.kodi · kodiEPSS78%2 exploitsPublished Feb 28, 2017
- CVE-2016-9244High 7.5A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory.f5 · big-ip access policy managerEPSS74%2 exploitsPublished Feb 9, 2017
- CVE-2017-3823High 8.8A vulnerability in these Cisco WebEx browser extensions could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system.cisco · activetouch general plugin containerEPSS27%1 exploitPublished Feb 1, 2017
- CVE-2016-6267High 8.8SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3)…trendmicro · smart protection serverEPSS55%1 exploitPublished Jan 30, 2017
- CVE-2016-6601High 7.5Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a ..zohocorp · webnms frameworkEPSS98%4 exploitsPublished Jan 23, 2017
- CVE-2016-7434High 7.5The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.ntp · ntpEPSS53%2 exploitsPublished Jan 13, 2017
- CVE-2016-7288High 7.5The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7296,…microsoft · edgeEPSS70%1 exploitPublished Dec 20, 2016
- CVE-2016-7287High 7.5The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."microsoft · edgeEPSS69%1 exploitPublished Dec 20, 2016
- CVE-2016-7286High 7.5The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7288, CVE-2016-7296,…microsoft · edgeEPSS69%1 exploitPublished Dec 20, 2016
- CVE-2016-8740High 7.5The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in…apache · http serverEPSS79%3 exploitsPublished Dec 5, 2016
- CVE-2015-1328High 7.8The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration…linux · linux kernelEPSS38%5 exploitsPublished Nov 28, 2016
- CVE-2016-7241High 7.5Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."microsoft · edgeEPSS71%3 exploitsPublished Nov 10, 2016
- CVE-2016-8870High 8.1The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!joomla · joomla\!EPSS81%2 exploitsPublished Nov 4, 2016
- CVE-2016-6433High 8.8The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.cisco · secure firewall management centerEPSS81%3 exploitsPublished Oct 6, 2016
- CVE-2016-2776High 7.5buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.isc · bindEPSS89%1 exploitPublished Sep 28, 2016
- CVE-2016-3357High 7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server…microsoft · officeEPSS55%1 exploitPublished Sep 14, 2016
- CVE-2016-3247High 7.5Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."microsoft · edgeEPSS71%1 exploitPublished Sep 14, 2016
- CVE-2016-4264High 8.6The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction…adobe · coldfusionEPSS69%1 exploitPublished Sep 1, 2016
- CVE-2016-5676High 7.5cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.netgear · readynas surveillanceEPSS54%1 exploitPublished Aug 31, 2016
- CVE-2016-3304High 7.8The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers…microsoft · live meetingEPSS51%1 exploitPublished Aug 9, 2016
- CVE-2016-3303High 7.8The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers…microsoft · live meetingEPSS51%1 exploitPublished Aug 9, 2016
- CVE-2016-3288High 7.5Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3290.microsoft · internet explorerEPSS52%1 exploitPublished Aug 9, 2016
- CVE-2016-6515High 7.5The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.openbsd · opensshEPSS59%1 exploitPublished Aug 7, 2016
- CVE-2016-3225High 7.8The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an…microsoft · windows 10EPSS43%3 exploitsPublished Jun 15, 2016
- CVE-2016-3222High 8.8Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."microsoft · edgeEPSS57%1 exploitPublished Jun 15, 2016
- CVE-2016-0199High 8.8Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0200 and…microsoft · internet explorerEPSS51%3 exploitsPublished Jun 15, 2016
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-8594 | Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… microsoft · internet explorer | High 7.5 | 50% | 2 exploits | |
| CVE-2017-10974 | Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. yaws · yaws | High 7.5 | 81% | 2 exploits | |
| CVE-2017-9833 | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges. boa · boa | High 7.5 | 68% | 2 exploits | |
| CVE-2017-9757 | IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. ipfire · ipfire | High 8.8 | 37% | 2 exploits | |
| CVE-2017-8487 | Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability." microsoft · windows server 2003 | High 7.8 | 54% | 2 exploits | |
| CVE-2017-8461 | Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution… microsoft · windows server 2003 | High 7.8 | 20% | 2 exploits | |
| CVE-2017-8548 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption… microsoft · edge | High 7.5 | 68% | 2 exploits | |
| CVE-2017-8496 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". microsoft · edge | High 7.5 | 51% | 2 exploits | |
| CVE-2017-8538 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… microsoft · malware protection engine | High 7.8 | 50% | 1 exploit | |
| CVE-2016-10073 | The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request. vanillaforums · vanilla | High 7.5 | 84% | 3 exploits | |
| CVE-2017-9100 | login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt. dlink · dir-600m firmware | High 8.8 | 85% | 1 exploit | |
| CVE-2017-9080 | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. playsms · playsms | High 8.8 | 62% | 4 exploits | |
| CVE-2017-0290 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… microsoft · malware protection engine | High 7.8 | 81% | 1 exploit | |
| CVE-2017-3730 | In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. openssl · openssl | High 7.5 | 55% | 2 exploits | |
| CVE-2017-8779 | rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no… libtirpc project · libtirpc | High 7.5 | 81% | 1 exploit | |
| CVE-2016-1561 | ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image. exagrid · ex10000e firmware | High 7.5 | 74% | 3 exploits | |
| CVE-2017-3599 | mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017) oracle · mysql | High 7.5 | 90% | 1 exploit | |
| CVE-2015-4624 | Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens. hak5 · wi-fi pineapple firmware | High 7.5 | 37% | 6 exploits | |
| CVE-2017-7310 | A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML… flexense · diskboss | High 7.8 | 54% | 8 exploits | |
| CVE-2017-0108 | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to… microsoft · live meeting | High 7.8 | 50% | 1 exploit | |
| CVE-2017-0089 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in… microsoft · windows 7 | High 8.8 | 57% | 1 exploit | |
| CVE-2017-0070 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. microsoft · edge | High 7.5 | 79% | 1 exploit | |
| CVE-2017-6398 | An authenticated user can execute a terminal command in the context of the web server user (which is root). trendmicro · interscan messaging security virtual appliance | High 8.8 | 54% | 1 exploit | |
| CVE-2017-6527 | dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter). dnatools · dnalims | High 7.5 | 57% | 1 exploit | |
| CVE-2017-5982 | Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd. kodi · kodi | High 7.5 | 78% | 2 exploits | |
| CVE-2016-9244 | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. f5 · big-ip access policy manager | High 7.5 | 74% | 2 exploits | |
| CVE-2017-3823 | A vulnerability in these Cisco WebEx browser extensions could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. cisco · activetouch general plugin container | High 8.8 | 27% | 1 exploit | |
| CVE-2016-6267 | SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3)… trendmicro · smart protection server | High 8.8 | 55% | 1 exploit | |
| CVE-2016-6601 | Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. zohocorp · webnms framework | High 7.5 | 98% | 4 exploits | |
| CVE-2016-7434 | The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query. ntp · ntp | High 7.5 | 53% | 2 exploits | |
| CVE-2016-7288 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7296,… microsoft · edge | High 7.5 | 70% | 1 exploit | |
| CVE-2016-7287 | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2016-7286 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7288, CVE-2016-7296,… microsoft · edge | High 7.5 | 69% | 1 exploit | |
| CVE-2016-8740 | The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in… apache · http server | High 7.5 | 79% | 3 exploits | |
| CVE-2015-1328 | The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration… linux · linux kernel | High 7.8 | 38% | 5 exploits | |
| CVE-2016-7241 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." microsoft · edge | High 7.5 | 71% | 3 exploits | |
| CVE-2016-8870 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! joomla · joomla\! | High 8.1 | 81% | 2 exploits | |
| CVE-2016-6433 | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872. cisco · secure firewall management center | High 8.8 | 81% | 3 exploits | |
| CVE-2016-2776 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. isc · bind | High 7.5 | 89% | 1 exploit | |
| CVE-2016-3357 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server… microsoft · office | High 7.8 | 55% | 1 exploit | |
| CVE-2016-3247 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." microsoft · edge | High 7.5 | 71% | 1 exploit | |
| CVE-2016-4264 | The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction… adobe · coldfusion | High 8.6 | 69% | 1 exploit | |
| CVE-2016-5676 | cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action. netgear · readynas surveillance | High 7.5 | 54% | 1 exploit | |
| CVE-2016-3304 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers… microsoft · live meeting | High 7.8 | 51% | 1 exploit | |
| CVE-2016-3303 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers… microsoft · live meeting | High 7.8 | 51% | 1 exploit | |
| CVE-2016-3288 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3290. microsoft · internet explorer | High 7.5 | 52% | 1 exploit | |
| CVE-2016-6515 | The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string. openbsd · openssh | High 7.5 | 59% | 1 exploit | |
| CVE-2016-3225 | The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an… microsoft · windows 10 | High 7.8 | 43% | 3 exploits | |
| CVE-2016-3222 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability." microsoft · edge | High 8.8 | 57% | 1 exploit | |
| CVE-2016-0199 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0200 and… microsoft · internet explorer | High 8.8 | 51% | 3 exploits |
Showing 451–500 of 890
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.